CVE-2008-3896

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2008-3896

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2008-3896.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2008-3896

Downstream

DEBIAN-CVE-2008-3896

Published

2008-09-03T14:12:00Z

Modified

2025-08-16T23:00:20Z

Summary

[none]

Details

Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.

References

http://securityreason.com/securityalert/4204
http://securityreason.com/securityalert/4206
http://www.ivizsecurity.com/preboot-patch.html
http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf
http://www.securityfocus.com/archive/1/495726/100/0/threaded

CVE-2008-3896

Affected packages